100% Real JN0-664 dumps - Brilliant JN0-664 Exam Questions PDF
JN0-664 Exam PDF [2026] Tests Free Updated Today with Correct 99 Questions
Upon successfully passing the Juniper JN0-664 certification exam, candidates will be awarded the Juniper Networks Certified Internet Professional (JNCIP-SP) certification. Service Provider, Professional (JNCIP-SP) certification is valid for three years, after which candidates must recertify by passing a current version of the JNCIP-SP exam or by completing a relevant Juniper Networks certification.
The JN0-664 exam covers a range of topics, including advanced routing protocols such as OSPF, IS-IS, BGP, and MPLS, as well as service provider-specific technologies such as LDP, RSVP, and VPLS. Candidates are also expected to have a strong understanding of network security, high availability, network automation, and network management best practices.
NEW QUESTION # 41 
Click the Exhibit hutton.
You are configuring an interprovider Option C Layer 3 VPN to connect two customer sites.
Referring to the exhibit, which three statements are correct? (Choose three.)
- A. P routers only maintain the internal routes from their own AS.
- B. ASBR routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.
- C. P routers maintain the internal routes from its own AS and the loopback address from the other AS PEs.
- D. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.
- E. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.
Answer: A,D,E
Explanation:
Interprovider Option C for Layer 3 VPNs involves the use of Autonomous System Boundary Routers (ASBRs) to exchange labeled VPN-IPv4 routes between different Autonomous Systems (AS). This option requires BGP sessions between ASBRs, and the VPN routes are carried end-to-end using MPLS labels. Here's a detailed analysis of the roles of different routers in this scenario:
1. **ASBR Routers**:
- ASBRs are responsible for exchanging VPN-IPv4 routes between different ASes.
- **A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**
- Correct. ASBRs maintain routes to internal destinations within their own AS, and they also need to know the loopback addresses of PEs in the other AS to set up the BGP sessions and MPLS tunnels.
2. **PE Routers**:
- PE routers are responsible for maintaining VPN routes and label information to forward VPN traffic correctly.
- **B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**
- Correct. PE routers need to maintain:
- Internal routes within their AS for routing.
- Loopback addresses of other AS PEs for establishing MPLS LSPs.
- L3VPN routes to provide end-to-end VPN connectivity.
3. **P Routers**:
- P routers are the core routers that do not participate in BGP VPN routing but forward labeled packets based on MPLS labels.
- **C. P routers only maintain the internal routes from their own AS.**
- Correct. P routers maintain the internal routing information to forward packets within the AS and use MPLS labels for forwarding VPN packets. They do not maintain VPN routes or routes from other ASes.
4. **Incorrect Statements**:
- **D. P routers maintain the internal routes from its own AS and the loopback address from the other AS PEs.**
- Incorrect. P routers do not need to maintain the loopback addresses of other AS PEs. They only maintain internal routing and MPLS label information.
- **E. ASBR routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**
- Incorrect. ASBR routers do not maintain L3VPN routes. They exchange labeled VPN-IPv4 routes with other ASBRs and forward them to PE routers.
**Conclusion**:
The correct answers are:
**A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**
**B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**
**C. P routers only maintain the internal routes from their own AS.**
**References**:
- Juniper Networks Documentation on Interprovider VPNs: [Interprovider VPN Configuration](https://www.juniper.net/documentation/en_US/junos/topics/topic-map/mpls-vpn-interprovider.ht
- MPLS and VPN Architectures, CCIP Edition by Ivan Pepelnjak and Jim Guichard
NEW QUESTION # 42
Exhibit
Which two statements are true about the OSPF adjacency displayed in the exhibit? (Choose two.)
- A. There is a mismatch in the poll interval parameter between routers R1 and R2.
- B. There is a mismatch in the hello interval parameter between routers R1 and R2
- C. There is a mismatch in the OSPF hold timer parameter between routers R1 and R2.
- D. There is a mismatch in the dead interval parameter between routers R1 and R2.
Answer: B,D
Explanation:
Explanation
The hello interval is the time interval between two consecutive hello packets sent by an OSPF router on an interface. The dead interval is the time interval after which a neighbor is declared down if no hello packets are received from it. These parameters must match between two OSPF routers for them to form an adjacency. In the exhibit, router R1 has a hello interval of 10 seconds and a dead interval of 40 seconds, while router R2 has a hello interval of 30 seconds and a dead interval of 120 seconds. This causes a mismatch and prevents them from becoming neighbors23.
NEW QUESTION # 43
Which two statements are correct about VPLS tunnels? (Choose two.)
- A. BGP-signaled VPLS tunnels can use either RSVP or LDP between the PE routers.
- B. LDP-signaled VPLS tunnels only support control bit 0.
- C. LDP-signaled VPLS tunnels use auto-discovery to provision sites.
- D. BGP-signaled VPLS tunnels require manual provisioning of sites.
Answer: A,B
NEW QUESTION # 44
Which two statements are correct about IS-IS interfaces? (Choose two.)
- A. If a broadcast interface is in both L1 and L2, one combined hello message is sent for both levels.
- B. If a broadcast interface is in both L1 and L2, separate hello messages are sent for each level.
- C. If a point-to-point interface is in both L1 and L2, separate hello messages are sent for each level.
- D. If a point-to-point interface is in both 11 and L2, one combined hello message is sent for both levels.
Answer: B,C
NEW QUESTION # 45
You are troubleshooting the connection between AS 64496 and AS 64497 and notice that only one of the paths is being used for traffic forwarding.
Referring to the exhibit, which three actions will ensure that R1 is configured properly for load balancing BGP routes? (Choose three.)
- A. Verify that there is a load balancing export policy under routing-options for the received BGP routes on R1.
- B. Verify that an import load balancing policy exists under protocols bgp for the received BGP routes on R1.
- C. Verify that the multipath option is configured under protocols bgp on R1.
- D. Verify that the routing table on R1 has BGP routes for 203.0.113.128/25 with multiple next hops.
- E. Verify that the multipath option is configured under protocols bgp on both R2 and R3.
Answer: A,C,D
NEW QUESTION # 46
Exhibit
You are asked to exchange routes between R1 and R4 as shown in the exhibit. These two routers use the same AS number Which two steps will accomplish this task? (Choose two.)
- A. Configure the BGP group with the as-override parameter on R2 and R3
- B. Configure the BGP group with the advertise-peer-as parameter on R1 and R4.
- C. Configure the BGP group with the as-override parameter on R1 and R4
- D. Configure the BGP group with the advertise-peer-as parameter on R2 and R3.
Answer: A,D
Explanation:
https://www.juniper.net/documentation/us/en/software/junos/routing-policy/bgp/topics/example/bgp-advertise-peer-as.html
NEW QUESTION # 47
Exhibit
You are attempting to summarize routes from the 203.0.113.128/25 IP block on R8 to AS 64500. You implement the export policy shown in the exhibit and all routes from the routing table stop being advertised.
In this scenario, which two steps would you take to summarize the route in BGP? (Choose two.)
- A. Add the set protocols bgp family inet unicast add-path command to allow additional routes to the RIB tables. -
- B. Remove the from protocol bgp command from the export policy.
- C. Add the set routing-options static route 203.0.113.123/25 discard command.
- D. Replace exact in the export policy with orlonger.
Answer: C,D
Explanation:
To summarize routes from the 203.0.113.128/25 IP block on R8 to AS 64500, you need to do the following:
Add the set routing-options static route 203.0.113.128/25 discard command. This creates a static route for the summary prefix and discards any traffic destined to it. This is necessary because BGP can only advertise routes that are present in the routing table.
Replace exact in the export policy with orlonger. This allows R8 to match and advertise any route that is equal or more specific than the summary prefix. The exact term only matches routes that are exactly equal to the summary prefix, which is not present in the routing table.
NEW QUESTION # 48
Your organization manages a Layer 3 VPN for multiple customers. To support advanced route filtering on your PE routers, you must advertise more than one BGP community on advertised VPN routes to remote PE routers.
Which routing-instance configuration parameter would support this requirement?
- A. vrf-import
- B. vrf-target import
- C. vrf-export
- D. vrf-target export
Answer: C
NEW QUESTION # 49
Exhibit
Referring to the exhibit, which two statements are correct about the dual route reflectors within a cluster?
(Choose two.)
- A. RR1 and RR2 advertise routes learned from the clients to EBGP peers, using itself as the next hop.
- B. RR1 advertises routes from the client to RR2. using itself as the next hop.
- C. RR1 and RR2 append the duster ID when advertising routes from dient to dient.
- D. RR1 and RR2 must have the same duster ID to exchange routes learned from the client.
Answer: A,C
NEW QUESTION # 50
Exhibit
Which two statements are true about the OSPF adjacency displayed in the exhibit? (Choose two.)
- A. There is a mismatch in the poll interval parameter between routers R1 and R2.
- B. There is a mismatch in the hello interval parameter between routers R1 and R2
- C. There is a mismatch in the OSPF hold timer parameter between routers R1 and R2.
- D. There is a mismatch in the dead interval parameter between routers R1 and R2.
Answer: B,D
Explanation:
The hello interval is the time interval between two consecutive hello packets sent by an OSPF router on an interface. The dead interval is the time interval after which a neighbor is declared down if no hello packets are received from it. These parameters must match between two OSPF routers for them to form an adjacency. In the exhibit, router R1 has a hello interval of 10 seconds and a dead interval of 40 seconds, while router R2 has a hello interval of 30 seconds and a dead interval of 120 seconds. This causes a mismatch and prevents them from becoming neighbors23.
NEW QUESTION # 51
You want to ensure that L1 IS-IS routers have only the most specific routes available from L2 IS-IS routers.
Which action accomplishes this task?
- A. Configure the ignore-attached-bit parameter on all L2 routers.
- B. Configure all routers to be L1.
- C. Configure the ignore-attached-bit parameter on all L1 routers
- D. Configure all routers to allow wide metrics.
Answer: C
Explanation:
The attached bit is a flag in an IS-IS LSP that indicates whether a router is connected to another area or level (L2) of the network. By default, L2 routers set this bit when they advertise their LSPs to L1 routers, and L1 routers use this bit to select a default route to reach other areas or levels through L2 routers. However, this may result in suboptimal routing if there are multiple L2 routers with different paths to other areas or levels.
To ensure that L1 routers have only the most specific routes available from L2 routers, you can configure the ignore-attached-bit parameter on all L1 routers. This makes L1 routers ignore the attached bit and install all interarea routes learned from L2 routers in their routing tables.
NEW QUESTION # 52
A router running IS-IS is configured with an ISO address of 49.0001.00a0.c96b.c490.00.
Which part of this address is the system ID?
- A. 00a0.c96b.c490 is the system identifier.
- B. c96b.c490 is the system identifier.
- C. 0001.00a0.c96b.c490 is the system identifier.
- D. c490 is the system identifier.
Answer: A
Explanation:
In IS-IS (Intermediate System to Intermediate System) routing, each router is identified by a unique ISO (International Organization for Standardization) address, also known as a Network Entity Title (NET). The NET consists of three parts:
1. **Area Identifier**: Indicates the area to which the router belongs.
2. **System Identifier**: Uniquely identifies the router within the area.
3. **NSAP Selector (NSEL)**: Typically set to 00 for a router, indicating the Network Service Access Point.
The format of the ISO address is `49.XXXX.YYYY.YYYY.ZZZZ.ZZZZ.00`, where:
- `49` is the AFI (Authority and Format Identifier) indicating a private address.
- `XXXX` is the Area Identifier.
- `YYYY.YYYY.YYYY` is the System Identifier.
- `ZZZZ.ZZZZ` is the NSAP Selector.
Given the address `49.0001.00a0.c96b.c490.00`:
- **Area Identifier**: `49.0001`
- **System Identifier**: `00a0.c96b.c490`
- **NSAP Selector**: `00`
**Explanation**:
- **A. 00a0.c96b.c490 is the system identifier**:
- Correct. The System Identifier in an ISO address is a 48-bit (6-byte) field used to uniquely identify the router. In this address, `00a0.c96b.c490` is the correct 6-byte System Identifier.
- **B. 0001.00a0.c96b.c490 is the system identifier**:
- Incorrect. This includes the Area Identifier as part of the System Identifier, which is not correct.
- **C. c96b.c490 is the system identifier**:
- Incorrect. This is only part of the System Identifier. The full System Identifier must be 6 bytes long.
- **D. c490 is the system identifier**:
- Incorrect. This is an incomplete and incorrect part of the System Identifier.
**Conclusion**:
The correct part of the address that represents the System Identifier is:
**A. 00a0.c96b.c490 is the system identifier.**
**References**:
- Juniper Networks Documentation on IS-IS: [IS-IS Configuration](https://www.juniper.net/documentation
/en_US/junos/topics/task/configuration/isis-configuring.html)
- ISO/IEC 10589, the IS-IS routing protocol standard.
NEW QUESTION # 53
Exhibit.
Referring to the exhibit, which path would traffic passing through R1 take to get to R4?
- A. R1 -> R4
- B. R1 -> R3 -> R4
- C. R1 -> R2 -> R4
- D. R1 -> R2 -> R3 -> R4
Answer: C
Explanation:
The OSPF cost is carried in the LSAs that are exchanged within an OSPF area. When a router calculates the cost to a destination it uses the cost of the exit interface of each router in the path to the destination.
NEW QUESTION # 54
Which three statements about IS-IS in a multi-area network are correct? (Choose three.)
- A. Internal L1 PDUs are flooded to all L1 routers in other areas.
- B. Internal L1 PDUs are only flooded to the local area's L1 routers.
- C. External L2 PDUs are only flooded to the local area's L2 routers.
- D. Internal L1 PDUs are flooded to the local area's L2 routers.
- E. External L2 PDUs are flooded to all L2 routers in other areas.
Answer: B,D,E
Explanation:
Intermediate System to Intermediate System (IS-IS) is a link-state routing protocol designed to move information efficiently within a computer network, a group of physically connected computers or similar devices. It operates in two levels, Level 1 (L1) and Level 2 (L2), and supports hierarchical routing within a multi-area network.
Let's analyze each statement to determine its correctness in the context of IS-IS multi-area networks.
1. **Statement A: Internal L1 PDUs are flooded to the local area's L2 routers.**
- This statement is correct. L1 PDUs (Protocol Data Units) are flooded within the L1 area and also to the L2 routers that are present in the same area. These L2 routers act as the boundary routers that connect the local L1 area to other L1 areas via L2.
2. **Statement B: External L2 PDUs are flooded to all L2 routers in other areas.**
- This statement is correct. L2 PDUs are flooded throughout the entire L2 backbone, which includes all L2 routers in different areas. This ensures that inter-area routing information is shared across the network.
3. **Statement C: Internal L1 PDUs are flooded to all L1 routers in other areas.**
- This statement is incorrect. Internal L1 PDUs are only flooded within the local L1 area. They do not cross L1 area boundaries; inter-area communication is handled by L2 routers.
4. **Statement D: Internal L1 PDUs are only flooded to the local area's L1 routers.**
- This statement is correct. Internal L1 PDUs are indeed only flooded within their local L1 area, and do not go beyond it.
5. **Statement E: External L2 PDUs are only flooded to the local area's L2 routers.**
- This statement is incorrect. External L2 PDUs are flooded to all L2 routers throughout the IS-IS network, not just to those in the local area. This allows L2 routers to maintain a complete map of the network's topology.
**Conclusion**:
Given the analysis, the correct answers are:
**A. Internal L1 PDUs are flooded to the local area's L2 routers.**
**B. External L2 PDUs are flooded to all L2 routers in other areas.**
**D. Internal L1 PDUs are only flooded to the local area's L1 routers.**
**References**:
- Juniper Networks Documentation on IS-IS: [IS-IS
Overview](https://www.juniper.net/documentation/en_US/junos/topics/concept/is-is-routing-overview.html)
- RFC 1195, Use of OSI IS-IS for Routing in TCP/IP and Dual Environments: [RFC
1195](https://tools.ietf.org/html/rfc1195) which details the operation of IS-IS in multi-area networks.
NEW QUESTION # 55
Exhibit
You want to use both links between R1 and R2 Because of the bandwidth difference between the two links, you must ensure that the links are used as much as possible.
Which action will accomplish this goal?
- A. Disable multipath.
- B. Ensure that the metric-out parameter on the Gigabit Ethernet interface is higher than the 10 Gigibit Ethernet interface.
- C. Define a policy to tag routes with the appropriate bandwidth community.
- D. Enable per-prefix load balancing.
Answer: C
Explanation:
https://www.juniper.net/documentation/us/en/software/junos/sampling-forwarding-monitoring/bgp/topics/concep
NEW QUESTION # 56
Exhibit
R4 is directly connected to both RPs (R2 and R3) R4 is currently sending all ,o,ns upstream to R3 but you want all joins to go to R2 instead Referring to the exhibit, which configuration change will solve this issue?
- A. Change the bootstrap priority on R2 to be higher than R3
- B. Change the local address on R2 to be higher than R3.
- C. Change the group-range to be more specific on R2 than R3.
- D. Change the default route in inet.2 on R4 from R3 as the next hop to R2
Answer: A
Explanation:
Explanation
PIM Bootstrap Router (BSR) is a mechanism that allows PIM routers to discover and announce rendezvous point (RP) information for multicast groups. BSR uses two roles: candidate BSR and candidate RP. Candidate BSR is the router that collects information from all available RPs in the network and advertises it throughout the network. Candidate RP is the router that wants to become the RP and registers itself with the BSR. There can be only one active BSR in the network, which is elected based on the highest priority or highest IP address if the priority is the same. The BSR priority can be configured manually or assigned automatically. The default priority is 0 and the highest priority is 2551. In this question, R4 is directly connected to both RPs (R2 and R3) and is currently sending all joins upstream to R3 but we want all joins to go to R2 instead. To achieve this, we need to change the BSR priority on R2 to be higher than R3 so that R2 becomes the active BSR and advertises its RP information to R4.
NEW QUESTION # 57
Refer to the exhibit.
Click the Exhibit button.
You are troubleshooting an issue for a customer site that uses 10.10.0.0/24 in AS 65224, but you see another AS in the AS path.
Referring to the exhibit, what is the cause of the problem?
- A. AS 65000 is pre-pending AS 65137 to route advertisements.
- B. AS 65137 is advertising the 10.10.0.0/24 prefix.
- C. The local AS is in the process of withdrawing the route from AS 65137.
- D. The local AS is receiving two equal cost routes to 10.10.0.0/24.
Answer: B
NEW QUESTION # 58
Refer to the exhibit.
Click the Exhibit button.
You have an OSPF environment. You have recently added a router called R4 that is directly connected to R1 and R2. You discover that R4 is only peering with R2.
Referring to the exhibit, how would you correct the peering?
- A. Adjust the Priority on R1 to be lower than the Priority on R4.
- B. Change the MTU size on R1 and R2 to be 22 bytes higher than R4's MTU size.
- C. Adjust the Dead Interval on R4 to match the Dead Interval on R1 and R2.
- D. Adjust the Hello Interval on R1 and R2 to match the Hello Interval on R4.
Answer: D
NEW QUESTION # 59
Referring to the exhibit, which two statements are correct about BGP routes on R3 that are learned from the ISP-A neighbor? (Choose two.)
- A. By default, the next-hop value for these routes is not changed by ISP-A before being sent to R3.
- B. The next-hop value for these routes Is changed by ISP-A before being sent to R3.
- C. The BGP local-preference value that is used by ISP-A is not advertised to R3.
- D. All BGP attribute values must be removed before receiving the routes.
Answer: A,C
NEW QUESTION # 60
Exhibit
CE-1 and CE-2 are part of a VPLS called Customer1 No connectivity exists between CE-1 and CE-2. In the process of troubleshooting, you notice PE-1 is not learning any routes for this VPLS from PE-2, and PE-2 is not learning any routes for this VPLS from PE-1.
- A. The route distinguisher must match on PE-1 and PE-2.
- B. The no-tunnel-services statement should be deleted on both PEs.
- C. The instance type should be changed to I2vpn.
- D. The route target must match on PE-1 and PE-2.
Answer: D
Explanation:
VPLS is a technology that provides Layer 2 VPN services over an MPLS network. VPLS uses BGP as its control protocol to exchange VPN membership information between PE routers. The route target is a BGP extended community attribute that identifies which VPN a route belongs to. The route target must match on PE routers that participate in the same VPLS instance, otherwise they will not accept or advertise routes for that VPLS.
NEW QUESTION # 61
Exhibit
Based on the configuration contents shown in the exhibit, which statement is true?
- A. Joins for group 224.7.7.7 are always rejected, regardless of the group count.
- B. Joins for any group are accepted if the group count value is less than 25.
- C. Joins for group 224.7.7.7 are accepted if the group count is less than 25
- D. Joins for group 224.7.7.7 are rejected if the source address is 192.168.100.10
Answer: D
Explanation:
This configuration applies to IGMP (Internet Group Management Protocol) and is designed to control multicast group memberships on the interface ge-0/0/0.0.
Breaking Down the Configuration
1## Policy-Statement: block-igmp
policy-statement block-igmp {
term 1 {
from {
route-filter 224.7.7.7/32 exact;
source-address-filter 192.168.100.10/32 exact;
}
then reject;
}
}
* This policy blocks IGMP joins for group 224.7.7.7 only if the source IP is 192.168.100.10.
* If both conditions match, the request is rejected.
2## IGMP Configuration on Interface ge-0/0/0.0
[edit protocols igmp]
user@router# show
interface ge-0/0/0.0 {
group-policy block-igmp;
group-limit 25;
}
* group-policy block-igmp applies the policy statement block-igmp, meaning IGMP join requests are evaluated based on this policy.
* group-limit 25 means the interface allows up to 25 multicast groups.
Evaluating the Answer Choices
# A. Joins for group 224.7.7.7 are rejected if the source address is 192.168.100.10.
* Correct, because:
* The policy specifically matches group 224.7.7.7 and source IP 192.168.100.10.
* If both conditions are met, the join is rejected.
# B. Joins for any group are accepted if the group count value is less than 25.
* Incorrect, because:
* The group-limit (25) applies to the total number of IGMP groups but does not override explicit policy rules.
* Even if there are fewer than 25 groups, a join request can still be rejected by the policy statement.
# C. Joins for group 224.7.7.7 are always rejected, regardless of the group count.
* Incorrect, because:
* The policy only blocks joins from the specific source 192.168.100.10.
* Joins from other sources to 224.7.7.7 are allowed.
# D. Joins for group 224.7.7.7 are accepted if the group count is less than 25.
* Incorrect, because:
* Joins for 224.7.7.7 from source 192.168.100.10 will always be rejected, even if the group count is below 25.
* The group-limit does not override the rejection policy.
"Joins for group 224.7.7.7 are rejected if the source address is 192.168.100.10."
# Official Juniper Documentation Reference:
# Junos IGMP Policy Configuration Guide
"A group-policy statement allows filtering IGMP joins based on multicast group address and source IP."
NEW QUESTION # 62
......
Verified & Correct JN0-664 Practice Test Reliable Source Sep 28, 2026 Updated: https://www.dumpstorrent.com/JN0-664-exam-dumps-torrent.html
Juniper JN0-664 Exam Preparation Guide and PDF Download: https://drive.google.com/open?id=1pcVoqZXKaiu8zF9DcfnVkmsqN0zrWL6k